Trending Courses

Vendors

Skip Navigation Links

Overview

In this course, you will learn how to use FortiSIEM in a multi-tenant environment. You will learn about rules and their architecture, how incidents are generated, how baseline calculations are performed, the different methods of remediation available, and how the MITRE ATT&CK framework integrates with FortiSIEM. You will also learn how to integrate FortiSOAR with FortiSIEM.
img-course-overview.jpg

What You'll Learn

After completing this course, you should be able to:
  • Identify various implementation requirements for a multi-tenant FortiSIEM deployment 
  • Deploy FortiSIEM in a hybrid environment with and without collectors 
  • Design multi-tenant solutions with FortiSIEM Deploy collectors in a multi-tenant environment 
  • Manage EPS assignment and restrictions on FortiSIEM 
  • Manage resource utilization of a multi-tenant FortiSIEM cluster 
  • Maintain and troubleshoot a collector installation 
  • Deploy and manage Windows and Linux agents 
  • Create rules by evaluating security events 
  • Define actions for a single pattern security rule 
  • Identify the incident attributes that trigger an incident 
  • Identify multiple pattern security rules and define conditions and actions for them 
  • Differentiate between a standard and baseline report 
  • Create your own baseline profiles 
  • Examine the MITRE ATT&CK framework integration on FortiSIEM and FortiSOAR 
  • Deploy FortiSIEM UEBA agents 
  • Examine UEBA rules, reports, event types, and windows template 
  • Configure clear conditions on FortiSIEM 
  • Analyze some out-of-the-box remediation scripts 
  • Configure various remediation methods on FortiSIEM 
  • Integrate FortiSOAR with FortiSIEM 
  • Remediate incidents from FortiSOAR

Who Should Attend

Security professionals involved in the management, configuration, administration, and monitoring of FortiSIEM and FortiSOAR devices in an enterprise or service provider deployment used to monitor and secure the networks of customer organizations.
img-who-should-learn.png

Prerequisites

You must have an understanding of the topics covered in the following courses, or have equivalent experience:
  • NSE 4 FortiGate Security NSE 4
  • FortiGate Infrastructure NSE 5 FortiSIEM

It is also highly recommended that you have an understanding, or equivalent experience with, Python programming, Jinja2 template language for Python, Linux systems, and SOAR technologies.

Learning Journey

Coming Soon...

1. Introduction to Multi-Tenancy
2. Defining Collectors and Agents
3. Operating Collectors
4. Windows and Linux Agents
5. Rules
6. Single Subpattern Security Rule
7. Multiple Subpattern Rules
8. Introduction to Baseline
9. Baseline
10. UEBA
11. MITRE ATT&CK
12. Clear Conditions
13. Remediation

Frequently Asked Questions (FAQs)

  • Why get Fortinet certified?

    Fortinet certifications validate your expertise in network security and your ability to implement and manage Fortinet's comprehensive Security Fabric.

    These certifications are highly valued by employers and demonstrate your commitment to staying ahead of the ever-evolving threat landscape.

    A Fortinet certification can open doors to new career opportunities, increase your earning potential, and make you a sought-after cybersecurity professional.

  • What to expect for the examination?

    Fortinet offers a variety of certification exams at different levels (NSE 1 - 8) and specializations (security, cloud, cybersecurity).

    Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and problem-solving skills in real-world security situations.

    Depending on the level and specialization, you will be required to pass/complete the core and/or elective exam(s), while the expert tier has written and practical exam.

    Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • How long is Fortinet certification valid for?

    As of 1 October 2023, all Fortinet certifications have an expiration date:

    NSE 1 - 4 (FCF, FCA, FCP, FCSS): Valid for two years.

    NSE 5 - 8 (FCX): Valid for three years.

    To maintain your certification, you must recertify before it expires. Recertification options include passing the same exam again or earning a higher-level certification.

    Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • Why take this course with Trainocate?

    Here’s what sets us apart:

    - Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).

    - Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.

    - Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.

    - Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.

    - Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.

    - Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Course Curriculum

Training Schedule

Training Schedule

Exam & Certification

Exam & Certification

FAQs

Frequently Asked Questions

img-improve-career.jpg

Improve yourself and your career by taking this course.

More Courses By Fortinet

Browse All Courses
ft-fgt-inf-fortigate-infrastructure-training
NSE 4

FortiGate Infrastructure

FortiGate Infrastructure (FT-FGT-INF)
ILT VILT
Course Duration 2 Days
ft-fgt-sec-fortigate-security-training
NSE 4

FortiGate Security

FT-FGT-SEC - FortiGate Security
ILT VILT
Course Duration 3 Days
ft-fsm-fortisiem-basic-training-training
NSE 5

FortiSIEM Basic Training

You will learn about initial configurations, architecture, and the discovery of devices on the network. You will also learn how to collect performance information and aggregate it with syslog data to
ILT VILT
Course Duration 3 Days
img-get-info.jpg

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name
Email
Phone
I'm inquiring for
Inquiry Details

By submitting this form, you consent to Trainocate processing your data to respond to your inquiry and provide you with relevant information about our training programs, including occasional emails with the latest news, exclusive events, and special offers.

You can unsubscribe from our marketing emails at any time. Our data handling practices are in accordance with our Privacy Policy.

Stay Connected. Be the first to Know.

Company

Vendors

Services

Customer Service

© Copyright Trainocate 2025. All rights reserved.